Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 280
  • Last Modified:

OrgUnit property in NotesRegistartion

Hi,

Can someone please explain to me the purpose of the OrgUnit property in NotesRegistration class? If I want to register a new user, the OrgUnit should normally be taken from the certifier id, right?

thanks
cyberzork
0
cyberzork
Asked:
cyberzork
  • 13
  • 8
  • 3
  • +2
1 Solution
 
zvonkoCommented:
Right.

0
 
zvonkoCommented:
I mean you already said all to be said.

I can add only that OU's are an option. You can have up to four levels of OU's, but you do not need to have one. You can live fine with O level only.

You get first problems when you like to cross certify some parts. For example, if you have not placed your servers into a separate OU hierarchy, than you have to cross certify with all people certifiers, or even worser, with the complete Organization if you work only with one hierarchy level.

Regards,
zvonko

0
 
Jean Marie GeeraertsApplication EngineerCommented:
You need to specify the organizational unit in your NotesRegistration object when you use one of the following methods:
- RegisterNewCertifier
- RegisterNewServer
- RegisterNewUser

For these methods it is required to specify all properties of your NotesRegistration object. Don't ask me why, it's just the way Iris implemented it :-)

More information can be obtained from the Lotus Designer online help.

Regards,
JM
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
zvonkoCommented:
Uhpps, I misread the important word :)



0
 
cyberzorkAuthor Commented:
So, what happens when I try to register a user with OrgUnit="AB/CD" and organization unit in certifier id is "EF/GH" ??
0
 
zvonkoCommented:
OHH man! you get an error :-)

0
 
Jean Marie GeeraertsApplication EngineerCommented:
Indeed :-)
0
 
ArunkumarCommented:
:-)
0
 
EricMDCommented:
if you use the notes 5 admin client then you don't need to wory about this. The certifier you choose to register the new peeps with will contain the OU/O . Can't go wrong there. only worries you have there is where to leave the ID file and if you'd like to use international or North American encryption . heheh.
0
 
zvonkoCommented:
Hi Eric,

Now I am not the only one alone running into the trap :-)

For NotesAdmin you need no NotesRegistrationClass. This is a question about LotusScript/COM/OLE :-)

As I always say: we read what we want to be there...

0
 
cyberzorkAuthor Commented:
I just want to clarify that I am trying to register a user using the NotesRegistartion LotusScript class. Therefore, the Notes Admin client is irrelevant here.
0
 
EricMDCommented:
Sorry I'm an SA CLP not AD CLP :-), so in my defence, why do you want to use scripting when You can use the register option that is already there :-p :-) :-)
0
 
ArunkumarCommented:
That was a good question Eric!!!

Hi Zvo!

:-)
0
 
zvonkoCommented:
Hello cyberzork,

Sorry for wrong info. I was only looking into Notes errors and found this:
Const long NOTES_ERR_BAD_ORGUNIT = NOTES_MIN_ERROR_CODE+338;

BUT, this does not concern the NotesRegistration.RegisterNewUser() method.
I called this method with:
NotesRegistration.OrgUnit = "TestOrg"

And I got my user.id with this OU created, even when in cert.id there was no OU present. Of corse does this new user have only the OU in the Hierarchical name, not in the certificates.

Hope this clarifies some things.

Regards,
zvonko
0
 
zvonkoCommented:
Hello cyberzork,

here the final explanation what the property OrgUnit is for in NotesRegistration class.

You have to let this property empty when using NotesRegistration class. All OrgUnits are fetched from used certifier id file.
The property OrgUnit is an additional possibility to create OrgUnits not yet certified.
When this feature does make sense, do not ask me. In my opinion is this OrgUnit property a fake :-)

If you have more questions about this please ask. Otherwise close this question.

Regards,
zvonko
0
 
Jean Marie GeeraertsApplication EngineerCommented:
It might be useful to create a UUOU (user unique organizational unit), which is used when two users would have exactly the same name using first name, middle initials, last name and regular OU's.
Or at least, that's how it used to be defined in R4.x
I haven't found this option in R5 registration anymore, though.
0
 
zvonkoCommented:
one additional info.

If your certifier id file already contains OU=Usr/O=myOrg
and you set the property OrgUnit to: "EF/GH/IJ/KL"
than you get this:
CN=some name/OU=EF/GH/IJ/KL/OU=Usr/O=myOrg

That proves once more that the property OrgUnit is only for fake purposes :-)

0
 
Jean Marie GeeraertsApplication EngineerCommented:
I have to disagree, zvonko.
It's not fake, it's the UUOU I mentioned in my previous comment.
This type of OU is used to differntiate between users that would otherwise have exactly the same user name.

Your example seems to proove my theory. :-)
0
 
zvonkoCommented:
Moin JM,

my tests where with R5.0.9

I never heard before about UUOU, but it seams you are right :-)

http://www.notes.net/46dom.nsf/55c38d716d632d9b8525689b005ba1c0/63a0ab502c9cdf29852566ba00421744?OpenDocument

0
 
Jean Marie GeeraertsApplication EngineerCommented:
Of course I am 8-))
0
 
cyberzorkAuthor Commented:
thanks to all
0
 
zvonkoCommented:
Thank you for the points :-)

0
 
Jean Marie GeeraertsApplication EngineerCommented:
Hey where are my points ? If I'm not mistaken, I explained what the organizational unit is for ?

<Just kidding>
0
 
zvonkoCommented:
Hey JM, this is the deal: you bring me a Lotus source where this UUOU is described and I offer 150 points for this, OK?

<Not kidding> (:-)

0
 
Jean Marie GeeraertsApplication EngineerCommented:
You're on, I'll try to find one on the net. I have the documentation at home in my admin course for R4.6, but I guess that won't do, right?
0
 
zvonkoCommented:
That would do if I could read it :-)

I will send you my office fax number on Monday, OK?
Take this sheet on Monday to your office, please.


 
0
 
Jean Marie GeeraertsApplication EngineerCommented:
Will be for tomorrow, didn't read this comment until just now...
0
 
zvonkoCommented:
no problems :-)

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

  • 13
  • 8
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now